Описание
The Tape Engine service in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allows remote attackers to execute arbitrary code via certain data in opnum 0xBF in an RPC request, which is directly executed.
Ссылки
- Patch
- US Government Resource
- Exploit
- Patch
- US Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 11.5 (включая)
Одно из
cpe:2.3:a:broadcom:brightstor_arcserve_backup:*:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.01:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:business_protection_suite:2.0:*:*:*:*:*:*:*
EPSS
Процентиль: 98%
0.61279
Средний
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
The Tape Engine service in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allows remote attackers to execute arbitrary code via certain data in opnum 0xBF in an RPC request, which is directly executed.
EPSS
Процентиль: 98%
0.61279
Средний
7.5 High
CVSS2
Дефекты
NVD-CWE-Other